
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json)
Hash identifier: EiP/9PhFvEmmb+XL705g/XBkouO4rCnbfgTkYq8FN/s=
Subject key identifier: 85:66:CA:CC:29:9D:F0:69:04:3C:E4:01:7D:3D:3E:45:96:D2:5E:56
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 682F4A69BCD31DFA5A188902126487BE18A16836
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
Manifest number: 25
Signing time: Tue 12 May 2026 22:25:48 +0000
Manifest this update: Tue 12 May 2026 22:20:48 +0000
Manifest next update: Thu 14 May 2026 02:07:48 +0000
Files and hashes: 1: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=)
2: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=)
3: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=)
4: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=)
5: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=)
6: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: 6+z1/AHzk1wQobmq8otvWgmAXSagJbagzNQDX67FFpE=)
7: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2f:4a:69:bc:d3:1d:fa:5a:18:89:02:12:64:87:be:18:a1:68:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: May 12 22:20:48 2026 GMT
Not After : May 14 02:07:48 2026 GMT
Subject: CN=8566CACC299DF069043CE4017D3D3E4596D25E56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cd:84:7b:b0:93:c8:89:e6:77:83:b7:29:e4:
09:30:0d:52:75:cd:70:5e:4d:9b:e9:06:9a:ec:d5:
17:6f:78:29:8c:0b:56:db:c7:28:97:33:06:99:c1:
0c:00:26:7d:da:43:01:7f:ad:74:83:d8:97:86:94:
7d:1c:c2:c1:19:bb:c6:38:71:39:80:84:21:cf:98:
2b:3e:f7:a8:d3:08:cc:02:f4:cf:d7:df:9f:3c:ce:
0c:88:0f:18:be:54:02:8d:a7:cb:da:cf:ac:dc:54:
97:1c:7a:bf:bb:ff:f2:97:78:cc:c6:33:1b:8f:13:
d7:f1:dd:90:28:69:d3:1d:37:fc:d6:5c:aa:9f:81:
05:ca:d7:c4:b2:b4:d6:b0:08:0d:64:7d:9d:5e:c7:
f5:d8:ca:07:3c:e1:cc:34:e6:59:43:3c:2d:c3:bb:
2f:ec:d2:83:ea:6c:aa:d7:bd:eb:ab:22:3b:ff:57:
69:04:05:06:66:db:d3:9c:9b:bb:28:35:61:61:a3:
bf:6f:ab:a3:da:e5:86:cd:61:0a:c7:a3:79:a2:d7:
28:d6:9b:02:e8:72:2f:4d:4f:ff:be:06:41:4e:a6:
ca:92:cc:4f:b1:8a:6e:2b:9c:d6:4e:92:80:fc:2f:
44:50:ea:ce:5a:42:e0:af:cd:91:34:5d:56:3d:dc:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:CA:CC:29:9D:F0:69:04:3C:E4:01:7D:3D:3E:45:96:D2:5E:56
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2d:ca:ab:88:a0:b7:a3:c8:bc:76:ec:34:c7:8e:b5:33:60:
35:19:b6:76:ca:29:19:1a:5a:75:b1:0c:dc:34:ed:a4:b4:ae:
2b:e2:7d:35:4d:a1:70:f8:d3:1d:fd:6e:18:d6:74:c5:9e:9f:
bc:07:7d:82:4b:d4:c2:78:1b:68:87:d8:e8:20:2b:35:fc:dc:
a0:d7:9e:38:54:96:f9:5a:ad:37:e3:40:18:f2:c9:00:57:8f:
a9:77:4a:bc:dc:c9:05:0c:bb:42:bd:1f:58:0c:f8:96:cd:f3:
9a:f0:4b:3a:f9:ca:fd:c4:36:db:20:1d:38:11:12:76:12:42:
6c:aa:33:e8:b2:6b:17:17:4a:6b:62:09:75:5b:42:69:c9:62:
e0:e7:97:dd:b9:63:ec:d4:d4:f9:31:db:2a:7d:f0:ce:57:fe:
8b:c0:af:de:a1:80:09:6b:a4:6c:6a:32:f6:fd:52:f1:85:ac:
26:1d:a7:aa:d2:c1:63:24:e6:f0:cf:6b:75:ff:a1:39:fd:ab:
e1:b9:bb:b1:98:e1:85:6e:06:25:b9:71:62:e1:92:0e:65:5a:
59:f8:9b:98:64:eb:06:13:fc:f0:46:34:c9:52:0e:8f:41:a0:
85:91:02:be:88:cc:12:7a:e9:67:5f:1e:20:1d:64:a2:81:8f:
26:95:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:16 2026 by rpki-client